본문 바로가기
Networking/Network General (Anything)

SPAN/RSPAN/ERSPAN

by 포항돼지 2025. 4. 17.

Switch port analyzer

 

Wireshark 하던 cable to cable packet capture (Client to server or vise versa)  Protocol 이용해서 포트에 걸어가지고, 우리 랩탑에서 스위치 포트에 꽂았을때 패킷 캡쳐 할수잇또록 하는 기술 This why this protocol called switch port analyzer

 

Switch - Client == SPAN

Switch - Switch == RSPAN

Switch - Router - Switch == ERSPAN

 

 

SPAN also referred to as port mirroring

Packet copies are sent to a traffic analyzer (wireshark or other traffic analyzing tool)

Analyzers aggregate and sort data in a visual manner

 

 

Local SPAN : Traffic captured and mirrored locally

Remote SPAN (RSPAN) : Monitor multiple remote switches, traffic copied to a central traffic analyzer

Encapsulated Remote SPAN (ERSPAN) : Cisco proprietary version, Uses generic routing encapsulation (GRE)

  • For implement, we don't need to create GRE session and etc… just set the ip address and other configuration on the switch -> cisco minimized the configuration as much as they can

 

Creating monitoring session, and send the data (work method)

Destination is the some special VLAN we have to create

 

'Networking > Network General (Anything)' 카테고리의 다른 글

802.1x protocol , Port-Security  (0) 2025.04.17
RADIUS (AAA)  (0) 2025.04.17
Zigbee  (0) 2025.04.17
Virtual Machine Network  (0) 2025.04.02
ESXI Server Network 구성  (0) 2022.10.06